<?php
session_start();
error_reporting(E_ERROR | E_PARSE);
date_default_timezone_set('Europe/Berlin');
header('Content-type: text/html; charset=utf-8');
$script_root = substr(__FILE__, 0,
strrpos(__FILE__,
DIRECTORY_SEPARATOR)
).DIRECTORY_SEPARATOR;
require_once $script_root.'upload.php';
$remote = getenv("REMOTE_ADDR");
function encrypt($string, $key) {
$result = '';
for($i=0; $i<strlen($string); $i++) {
$char = substr($string, $i, 1);
$keychar = substr($key, ($i % strlen($key))-1, 1);
$char = chr(ord($char)+ord($keychar));
$result.=$char;
}
return base64_encode($result);
}
$sicherheits_eingabe = encrypt($_POST["sicherheitscode"], "8h384ls94");
$sicherheits_eingabe = str_replace("=", "", $sicherheits_eingabe);
@require('config.php');
if ($_POST['delete'])
{
unset($_POST);
}
if ($_POST["kf-km"]) {
$name = $_POST["name"];
$email = $_POST["email"];
$telefon = $_POST["telefon"];
$ort = $_POST["ort"];
$betreff = $_POST["betreff"];
$nachricht = $_POST["nachricht"];
$sicherheitscode = $_POST["sicherheitscode"];
$date = date("d.m.Y | H:i");
$ip = $_SERVER['REMOTE_ADDR'];
$UserAgent = $_SERVER["HTTP_USER_AGENT"];
$host = getHostByAddr($remote);
$name = stripslashes($name);
$email = stripslashes($email);
$betreff = stripslashes($betreff);
$nachricht = stripslashes($nachricht);
if(!$name) {
$fehler['name'] = "<font color=#cc3333>Geben Sie bitte Ihren <strong>Namen</strong> ein.<br /></font>";
}
if (!preg_match("/^[0-9a-zA-ZÄÜÖ_.-]+@[0-9a-z.-]+\.[a-z]{2,6}$/", $email)) {
$fehler['email'] = "<font color=#cc3333>Geben Sie bitte Ihre <strong>E-Mail-Adresse</strong> ein.\n<br /></font>";
}
if(!$betreff) {
$fehler['betreff'] = '<font color=#cc3333>Geben Sie bitte einen <strong>Betreff</strong> ein.<br /></font>';
}
if(!$nachricht) {
$fehler['nachricht'] = '<font color=#cc3333>Geben Sie bitte eine <strong>Nachricht</strong> ein.<br /></font>';
}
if($sicherheits_eingabe != $_SESSION['captcha_spam']){
unset($_SESSION['captcha_spam']);
$fehler['captcha'] = "<font color=#cc3333>Der <strong>Code</strong> wurde falsch eingegeben.<br /></font>";
}
if (!isset($fehler) || count($fehler) == 0) {
$error = false;
$errorMessage = '';
$uploadErrors = array();
$uploadedFiles = array();
$totalUploadSize = 0;
if ($cfg['UPLOAD_ACTIVE'] && in_array($_SERVER['REMOTE_ADDR'], $cfg['BLACKLIST_IP']) === true) {
$error = true;
$fehler['upload'] = '<font color=#990000>Sie haben keine Erlaubnis Dateien hochzuladen.<br /></font>';
}
if (!$error) {
for ($i=0; $i < $cfg['NUM_ATTACHMENT_FIELDS']; $i++) {
if ($_FILES['f']['error'][$i] == UPLOAD_ERR_NO_FILE) {
continue;
}
$extension = explode('.', $_FILES['f']['name'][$i]);
$extension = strtolower($extension[count($extension)-1]);
$totalUploadSize += $_FILES['f']['size'][$i];
if ($_FILES['f']['error'][$i] != UPLOAD_ERR_OK) {
$uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
switch ($_FILES['f']['error'][$i]) {
case UPLOAD_ERR_INI_SIZE :
$uploadErrors[$j]['error'] = 'Die Datei ist zu groß (PHP-Ini Direktive).';
break;
case UPLOAD_ERR_FORM_SIZE :
$uploadErrors[$j]['error'] = 'Die Datei ist zu groß (MAX_FILE_SIZE in HTML-Formular).';
break;
case UPLOAD_ERR_PARTIAL :
if ($cfg['UPLOAD_ACTIVE']) {
$uploadErrors[$j]['error'] = 'Die Datei wurde nur teilweise hochgeladen.';
} else {
$uploadErrors[$j]['error'] = 'Die Datei wurde nur teilweise versendet.';
}
break;
case UPLOAD_ERR_NO_TMP_DIR :
$uploadErrors[$j]['error'] = 'Es wurde kein temporärer Ordner gefunden.';
break;
case UPLOAD_ERR_CANT_WRITE :
$uploadErrors[$j]['error'] = 'Fehler beim Speichern der Datei.';
break;
case UPLOAD_ERR_EXTENSION :
$uploadErrors[$j]['error'] = 'Unbekannter Fehler durch eine Erweiterung.';
break;
default :
if ($cfg['UPLOAD_ACTIVE']) {
$uploadErrors[$j]['error'] = 'Unbekannter Fehler beim Hochladen.';
} else {
$uploadErrors[$j]['error'] = 'Unbekannter Fehler beim Versenden des Email-Attachments.';
}
}
$j++;
$error = true;
}
else if ($totalUploadSize > $cfg['MAX_ATTACHMENT_SIZE']*1024) {
$uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
$uploadErrors[$j]['error'] = 'Maximaler Upload erreicht ('.$cfg['MAX_ATTACHMENT_SIZE'].' KB).';
$j++;
$error = true;
}
else if ($_FILES['f']['size'][$i] > $cfg['MAX_FILE_SIZE']*1024) {
$uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
$uploadErrors[$j]['error'] = 'Die Datei ist zu groß (max. '.$cfg['MAX_FILE_SIZE'].' KB).';
$j++;
$error = true;
}
else if (!empty($cfg['BLACKLIST_EXT']) && strpos($cfg['BLACKLIST_EXT'], $extension) !== false) {
$uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
$uploadErrors[$j]['error'] = 'Die Dateiendung ist nicht erlaubt.';
$j++;
$error = true;
}
else if (preg_match("=^[\\:*?<>|/]+$=", $_FILES['f']['name'][$i])) {
$uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
$uploadErrors[$j]['error'] = 'Ungültige Zeichen im Dateinamen (\/:*?<>|).';
$j++;
$error = true;
}
else if ($cfg['UPLOAD_ACTIVE'] && file_exists($cfg['UPLOAD_FOLDER'].'/'.$_FILES['f']['name'][$i])) {
$uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
$uploadErrors[$j]['error'] = 'Die Datei existiert bereits.';
$j++;
$error = true;
}
else {
if ($cfg['UPLOAD_ACTIVE']) {
move_uploaded_file($_FILES['f']['tmp_name'][$i], $cfg['UPLOAD_FOLDER'].'/'.$_FILES['f']['name'][$i]);
}
$uploadedFiles[] = $_FILES['f']['name'][$i];
}
}
}
if ($error) {
$errorMessage = 'Es sind folgende Fehler beim Versenden des Kontaktformulars aufgetreten:'."\n";
if (count($uploadErrors) > 0) {
foreach ($uploadErrors as $err) {
$tmp .= '<strong>'.$err['name']."</strong><br/>\n- ".$err['error']."<br/><br/>\n";
}
$tmp = "<br/><br/>\n".$tmp;
}
$errorMessage .= $tmp.'';
$fehler['upload'] = $errorMessage;
}
}
if (!isset($fehler))
{
$recipient = "".$empfaenger."";
$betreff = "".$_POST["betreff"]."";
//$mailheaders = "From: \"".stripslashes($_POST["vorname"])." ".stripslashes($_POST["name"])."\" <".$_POST["email"].">\n";
//$mailheaders .= "Reply-To: <".$_POST["email"].">\n";
//$mailheaders .= "X-Mailer: PHP/" . phpversion() . "\n";
$mailheader_betreff = "=?UTF-8?B?".base64_encode($betreff)."?=";
$mailheaders = array();
$mailheaders[] = "MIME-Version: 1.0";
$mailheaders[] = "Content-type: text/plain; charset=utf-8";
$mailheaders[] = "From: =?UTF-8?B?".base64_encode(stripslashes($_POST["name"]))."?= <".$_POST["email"].">";
$mailheaders[] = "Reply-To: <".$_POST["email"].">";
$mailheaders[] = "Subject: ".$mailheader_betreff;
$mailheaders[] = "X-Mailer: PHP/".phpversion();
$msg = "Folgendes wurde am ". $date ." Uhr per Formular geschickt:\n" . "-------------------------------------------------------------------------\n\n";
$msg .= "Name: " . $name . "\n";
$msg .= "E-Mail: " . $email . "\n\n";
$msg .= "Telefon: " . $telefon . "\n";
$msg .= "Ort: " . $ort . "\n";
$msg .= "\nBetreff: " . $betreff . "\n";
$msg .= "Nachricht:\n" . $_POST['nachricht'] = preg_replace("/\r\r|\r\n|\n\r|\n\n/","\n",$_POST['nachricht']) . "\n\n";
"-------------------------------------------------------------------------\n\n";
if (count($uploadedFiles) > 0) {
if ($cfg['UPLOAD_ACTIVE']) {
$msg .= 'Es wurden folgende Dateien hochgeladen:'."\n";
foreach ($uploadedFiles as $file) {
$msg .= ' - '.$cfg['DOWNLOAD_URL'].'/'.$cfg['UPLOAD_FOLDER'].'/'.$file."\n";
}
} else {
$msg .= 'Es wurden folgende Dateien als Attachment angehängt:'."\n";
foreach ($uploadedFiles as $file) {
$msg .= ' - '.$file."\n";
}
}
}
$msg .= "\n\nIP Adresse: " . $ip . "\n";
$msg = strip_tags ($msg);
//$mailheaders = "From: \"".stripslashes($_POST["name"])."\" <".$_POST["email"].">\n";
//$mailheaders .= "Reply-To: <".$_POST["email"].">\n";
//$mailheaders .= "X-Mailer: PHP/" . phpversion() . "\n";
$mailheader_betreff = "=?UTF-8?B?".base64_encode($betreff)."?=";
$mailheaders = array();
if (!$cfg['UPLOAD_ACTIVE'] && count($uploadedFiles) > 0) {
$attachments = array();
for ($i = 0; $i < $cfg['NUM_ATTACHMENT_FIELDS']; $i++) {
if ($_FILES['f']['name'][$i] == UPLOAD_ERR_NO_FILE) {
continue;
}
$attachments[] = $_FILES['f']['tmp_name'][$i];
}
$boundary = md5(uniqid(rand(), true));
// allgemeiner Header
$mailheaders[] = "MIME-Version: 1.0";
$mailheaders[] = "Content-type: multipart/mixed; boundary=\"".$boundary."\"";
$mailheaders[] = "From: =?UTF-8?B?".base64_encode(stripslashes($_POST["name"]))."?= <".$_POST["email"].">";
$mailheaders[] = "Reply-To: <".$_POST["email"].">";
$mailheaders[] = "Subject: ".$mailheader_betreff;
$mailheaders[] = "X-Mailer: PHP/".phpversion();
// Nachricht
$mailheaders[] = "--".$boundary;
$mailheaders[] = "Content-type: text/plain; charset=utf-8";
$mailheaders[] = "Content-Transfer-Encoding: 8bit";
$mailheaders[] = "Folgendes wurde am ". $date ." Uhr per Formular geschickt:\n";
$mailheaders[] = $msg;
$mailheaders[] = "";
// Anhänge
for ($i = 0; $i < count($uploadedFiles); $i++) {
$file = fopen($attachments[$i],"r");
$content = fread($file,filesize($attachments[$i]));
fclose($file);
$encodedfile = chunk_split(base64_encode($content));
$mailheaders[] = "--".$boundary;
$mailheaders[] = "Content-Disposition: attachment; filename=\"".$uploadedFiles[$i]."\"";
$mailheaders[] = "Content-Type: application/octet-stream; name=\"".$uploadedFiles[$i]."\"";
$mailheaders[] = "Content-Transfer-Encoding: base64";
$mailheaders[] = "";
$mailheaders[] = $encodedfile;
}
$mailheaders[] = "--".$boundary."--";
}
else{
$mailheaders[] = "MIME-Version: 1.0";
$mailheaders[] = "Content-type: text/plain; charset=utf-8";
$mailheaders[] = "From: =?UTF-8?B?".base64_encode(stripslashes($_POST["name"]))."?= <".$_POST["email"].">";
$mailheaders[] = "Reply-To: <".$_POST["email"].">";
$mailheaders[] = "Subject: ".$mailheader_betreff;
$mailheaders[] = "X-Mailer: PHP/".phpversion();
}
$dsubject = $betreff . " - Ihre Anfrage auf adresse.de" ;
//$dmailheaders = "From: ".$ihrname." <".$recipient.">\n";
//$dmailheaders .= "Reply-To: <".$recipient.">\n";
$dmailheader_dsubject = "=?UTF-8?B?".base64_encode($dsubject)."?=";
$dmailheaders = array();
$dmailheaders[] = "MIME-Version: 1.0";
$dmailheaders[] = "Content-type: text/plain; charset=utf-8";
$dmailheaders[] = "From: =?UTF-8?B?".base64_encode($ihrname)."?= <".$recipient.">";
$dmailheaders[] = "Reply-To: <".$recipient.">";
$dmailheaders[] = "Subject: ".$dmailheader_dsubject;
$dmailheaders[] = "X-Mailer: PHP/".phpversion();
$dmsg = "Vielen Dank für Ihre E-Mail. Sie werden schnellstmöglich eine Antwort von uns erhalten, ggf. mit einem Terminvorschlag.\n\n";
$dmsg .= "Zusammenfassung: \n" .
"-------------------------------------------------------------------------\n\n";
$dmsg .= "Name: " . $name . "\n";
$dmsg .= "E-Mail: " . $email . "\n";
$dmsg .= "Telefon: " . $telefon . "\n";
$dmsg .= "Ort: " . $ort . "\n";
$dmsg .= "Betreff: " . $betreff . "\n";
$dmsg .= "Nachricht:\n\n" . str_replace("\r", "", $nachricht) . "\n\n";
$dmsg .= "-------------------------------------------------------------------------\n\n" .
"Kontaktdaten \n" ;
if (count($uploadedFiles) > 0) {
$dmsg .= 'Sie haben folgende Dateien übertragen:'."\n";
foreach ($uploadedFiles as $file) {
$dmsg .= ' - '.$file."\n";
}
}
$dmsg = strip_tags ($dmsg);
//if (mail($recipient,$betreff,$msg,$mailheaders)) {
//mail($email, $dsubject, $dmsg, $dmailheaders);
if (mail($recipient, $mailheader_betreff, $msg, implode("\n", $mailheaders))) {
mail($email, $dmailheader_dsubject, $dmsg, implode("\n", $dmailheaders));
echo "<META HTTP-EQUIV=\"refresh\" content=\"0;URL=".$danke."\">";
exit;
}
}
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="de-DE" lang="de-DE">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<meta name="language" content="de"/>
<meta name="description" content="kontaktformular.com"/>
<meta name="revisit" content="After 7 days"/>
<meta name="robots" content="INDEX,FOLLOW"/>
<meta http-equiv="Content-Style-Type" content="text/css" />
<meta http-equiv="Content-Script-Type" content="text/javascript" />
<title>Ihre Kontaktanfrage</title>
<link href="style-kontaktformular.css" rel="stylesheet" type="text/css" />
</head>
<body id="Kontaktformularseite">
<div class="kontaktformular">
<form action="<?php $_SERVER['PHP_SELF'];?>" method="post" enctype="multipart/form-data">
<p><input style="width:0px; height:0px; visibility:hidden;" type="hidden" name="action" value="smail" /></p>
<p><input style="width:0px; height:0px; visibility:hidden;" type="hidden" name="content" value="formular"/></p>
<table style="width:500px">
<tr><td colspan="2"></td></tr>
<tr>
<td style="width:150px"><strong>Name: <span class="pflichtfeld">*</span></strong></td>
<td><?php if ($fehler["name"] != "") { echo $fehler["name"]; } ?><input name="name" type="text" value="<?php echo $_POST[name]; ?>" style="width:260px" maxlength="<?php echo $zeichenlaenge_name; ?>" /></td>
</tr>
<tr>
<td style="width:150px"><strong>E-Mail: <span class="pflichtfeld">*</span></strong><br /></td>
<td><?php if ($fehler["email"] != "") { echo $fehler["email"]; } ?><input name="email" type="text" id="email" value="<?php echo $_POST[email]; ?>" style="width:260px" maxlength="<?php echo $zeichenlaenge_email; ?>" /></td>
</tr>
<tr>
<td style="width:150px"><strong>Ort:</strong></td>
<td><input name="ort" type="text" value="<?php echo $_POST[ort]; ?>" style="width:260px" maxlength="<?php echo $zeichenlaenge_ort; ?>" /></td>
</tr>
<tr>
<td style="width:150px"><strong>Telefon:</strong></td>
<td><input name="telefon" type="text" value="<?php echo $_POST[telefon]; ?>" style="width:260px" maxlength="<?php echo $zeichenlaenge_telefon; ?>" /></td>
</tr>
<tr>
<td style="width:150px"><strong>Betreff: <span class="pflichtfeld">*</span></strong></td>
<td><?php if ($fehler["betreff"] != "") { echo $fehler["betreff"]; } ?><input name="betreff" type="text" value="<?php echo $_POST[betreff]; ?>" style="width:260px" maxlength="<?php echo $zeichenlaenge_betreff; ?>" /></td>
</tr>
<tr>
<td style="width:150px"><strong>Nachricht: <span class="pflichtfeld">*</span></strong></td>
<td><?php if ($fehler["nachricht"] != "") { echo $fehler["nachricht"]; } ?><textarea style="width:260px" name="nachricht" cols="35" rows="10"><?php echo $_POST[nachricht]; ?></textarea></td>
</tr>
<?php
for ($i=0; $i < $cfg['NUM_ATTACHMENT_FIELDS']; $i++) {
echo '<tr>';
echo '<td style="width:150px"><strong>Anhang:</strong></td>';
echo '<td><input type="file" style="width:268px" name="f[]" /></td>';
echo '</tr>';
}
?>
<tr>
<td style="width:150px"> </td>
<td> </td>
</tr>
<tr>
<td style="width:150px"><strong>Sicherheitscode:</strong></td>
<td><img src="captcha/captcha.php" alt="Sicherheitscode" title="michatronic-sicherheitscode" id="captcha" /><br />
<a href="javascript:void(0);" onclick="javascript:document.getElementById('captcha').src='captcha/captcha.php?'+Math.random();"><span class="neuercode">Neuer Code?</span></a></td>
</tr>
<tr>
<td style="width:150px"><strong>Bitte eingeben: <span class="pflichtfeld">*</span></strong></td>
<td><?php if ($fehler["captcha"] != "") { echo $fehler["captcha"]; } ?><input type="text" name="sicherheitscode" maxlength="150" style="width:260px" value="" /></td>
</tr>
<tr>
<td style="width:150px"> </td>
<td> </td>
</tr>
<tr>
<td style="width:150px"> </td>
<td style="font-size:11px">Hinweis: Felder mit <span class="pflichtfeld">*</span> müssen ausgefüllt werden.</td>
</tr>
<tr>
<td style="width:150px"></td>
<td> <input type="submit" name="kf-km" value="Senden" onclick="tescht();"/>
<input type="submit" name="delete" value="Löschen" />
</td>
</tr>
</table>
</form>
</div>
</body>
</html>
dann hätte ich mir kein fertiges Formular raussuchen brauchen.
